tocsin

Go/github.com/kong/kubernetes-ingress-controller/v3: medium

Kong Ingress Controller for Kubernetes (KIC): Cross-namespace TLS Secret Exfiltration in Gateways with GatewayClass missing `konghq.com/gatewayclass-unmanaged: 'true'` annotation

Action: Upgrade github.com/kong/kubernetes-ingress-controller/v3 to 3.4.14 or later.

go get github.com/kong/kubernetes-ingress-controller/v3@v3.5.7
go get github.com/kong/kubernetes-ingress-controller/v3@v3.4.14

Affected

introducedfixedlast affected
3.5.03.5.7-
03.4.14-

Fixed versions

3.5.73.4.14

Sources

published · modified · JSON